$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5B8CDC02351211F09D579B64C4F9AE02.roa File: 5B8CDC02351211F09D579B64C4F9AE02.roa (raw, json) Hash identifier: 1bAgWcJLlliVR0f1esq/e37v/i+ofAYAVlxnxD5PONo= Subject key identifier: BB:6E:9C:84:3D:D0:59:8B:8C:5A:C4:6E:8B:C7:9E:32:D3:5E:65:32 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0A4B Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5B8CDC02351211F09D579B64C4F9AE02.roa Signing time: Tue 20 May 2025 00:35:41 +0000 ROA not before: Tue 20 May 2025 00:35:41 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9513 IP address blocks: 203.83.64.0/18 maxlen: 18 203.83.64.0/19 maxlen: 19 203.83.65.0/24 maxlen: 24 203.83.72.0/22 maxlen: 22 203.83.72.0/24 maxlen: 24 203.83.73.0/24 maxlen: 24 203.83.74.0/24 maxlen: 24 203.83.75.0/24 maxlen: 24 203.83.78.0/23 maxlen: 23 203.83.84.0/24 maxlen: 24 203.83.96.0/19 maxlen: 19 203.83.96.0/22 maxlen: 22 203.83.110.0/24 maxlen: 24 203.83.111.0/24 maxlen: 24 203.83.114.0/23 maxlen: 23 203.83.116.0/22 maxlen: 22 203.83.116.0/23 maxlen: 23 203.83.118.0/24 maxlen: 24 203.168.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2635 (0xa4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: May 20 00:35:41 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=682bce5d-747e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7c:0d:72:8d:3c:eb:78:02:6f:fb:43:01:63: c1:2f:93:7c:03:46:0d:89:35:67:be:d9:ef:10:8a: 62:e9:73:17:82:37:90:61:c4:73:b5:78:8d:fe:21: b2:f0:fd:34:83:b3:6b:10:c4:96:28:41:4d:3b:b9: a2:7f:cc:96:01:86:f8:96:8f:0a:85:ce:f8:9a:12: 55:cd:69:00:44:55:45:d5:fb:c8:f7:7b:81:f9:f7: 73:12:ae:6b:c5:2f:2c:49:e5:03:36:e3:a8:5b:de: ef:63:35:ef:95:a0:1f:ad:e8:e9:4e:71:b9:54:3b: 15:c7:8b:66:4e:22:98:10:94:e2:71:90:85:5a:3f: 90:4a:11:4c:c9:da:53:3e:9b:80:d9:61:f1:10:2d: a4:f7:c7:b4:8d:04:42:b0:04:02:40:55:5f:24:f5: 0a:d6:b6:ba:29:ac:d6:ca:e5:8a:aa:89:a7:01:09: 44:db:b8:4e:cd:06:98:a7:c1:7b:81:7a:f4:c2:75: c9:78:0d:04:1d:59:db:8b:75:46:5e:63:bf:c2:58: 19:d8:28:8f:a0:ee:18:65:34:85:0a:d3:49:d0:fc: d3:fe:7f:eb:18:6b:df:09:16:23:33:b2:7b:58:1c: 6e:66:39:f5:04:19:0f:4f:04:9f:21:8d:8d:2a:fb: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6E:9C:84:3D:D0:59:8B:8C:5A:C4:6E:8B:C7:9E:32:D3:5E:65:32 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5B8CDC02351211F09D579B64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.83.64.0/18 203.168.132.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:c4:35:a6:2f:3f:19:be:58:04:c5:cd:4f:f8:a0:4e:2f:48: 4b:1e:2f:54:c2:30:58:5b:02:a5:06:97:aa:ed:d2:3c:65:96: 39:b7:67:d8:d7:8e:54:55:d9:2f:05:47:bf:9b:e7:58:be:a2: a2:24:41:1c:4f:7c:8e:d1:6d:a1:6c:ee:3c:15:94:af:ca:3e: 71:68:61:52:05:95:3d:fa:e7:46:89:ca:95:00:f0:05:df:ba: 9d:40:d2:7c:b5:4a:b8:01:be:69:da:c3:eb:65:4f:32:1e:84: 26:71:6c:5b:4a:d4:4e:fd:c9:ed:a7:41:10:c1:4a:17:f0:10: a9:5f:f1:7a:f1:90:f0:11:8b:99:dc:fc:3e:ae:02:4f:38:3d: e7:a5:9c:02:ce:a0:a7:a9:d6:ae:1b:b7:14:38:cd:c5:c1:82: dc:36:6f:e3:86:8b:55:1a:38:2c:7f:ea:32:6e:03:9e:b1:d2: ec:e1:a4:26:18:f1:2c:4a:a6:11:9b:c9:4f:49:d3:d9:38:ac: f7:46:54:21:b4:cc:65:69:2e:3c:f1:61:6f:20:d8:61:9c:e8: fa:07:65:70:38:9b:6b:9c:4c:91:3b:11:5e:ee:1f:60:e5:2e: ab:d4:aa:38:4a:d1:81:c7:59:8c:61:9c:49:52:06:ff:f5:89: 27:5c:33:f2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUwNTIwMDAzNTQxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODJiY2U1ZC03NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmHwNco0863gCb/tDAWPBL5N8A0YNiTVnvtnvEIpi6XMXgjeQYcRztXiN/iGy 8P00g7NrEMSWKEFNO7mif8yWAYb4lo8Khc74mhJVzWkARFVF1fvI93uB+fdzEq5r xS8sSeUDNuOoW97vYzXvlaAfrejpTnG5VDsVx4tmTiKYEJTicZCFWj+QShFMydpT PpuA2WHxEC2k98e0jQRCsAQCQFVfJPUK1ra6KazWyuWKqomnAQlE27hOzQaYp8F7 gXr0wnXJeA0EHVnbi3VGXmO/wlgZ2CiPoO4YZTSFCtNJ0PzT/n/rGGvfCRYjM7J7 WBxuZjn1BBkPTwSfIY2NKvt0gwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLtunIQ9 0FmLjFrEbovHnjLTXmUyMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvNUI4Q0RDMDIz NTEyMTFGMDlENTc5QjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAbLU0ADBALLqIQwDQYJKoZIhvcNAQELBQADggEBACvENaYv Pxm+WATFzU/4oE4vSEseL1TCMFhbAqUGl6rt0jxlljm3Z9jXjlRV2S8FR7+b51i+ oqIkQRxPfI7RbaFs7jwVlK/KPnFoYVIFlT3650aJypUA8AXfup1A0ny1SrgBvmna w+tlTzIehCZxbFtK1E79ye2nQRDBShfwEKlf8XrxkPARi5nc/D6uAk84PeelnALO oKep1q4btxQ4zcXBgtw2b+OGi1UaOCx/6jJuA56x0uzhpCYY8SxKphGbyU9J09k4 rPdGVCG0zGVpLjzxYW8g2GGc6PoHZXA4m2ucTJE7EV7uH2DlLqvUqjhK0YHHWYxh nElSBv/1iSdcM/I= -----END CERTIFICATE-----Generated at Mon Jun 2 07:02:19 2025 by rpki-client